# Specifying information about endpoints for secure exchange of client data

**URL:** <https://forum.openreferral.org/t/specifying-information-about-endpoints-for-secure-exchange-of-client-data/373>\
**Category:** Technical\
**Created:** [March 28, 2023, 3:53pm UTC](https://forum.openreferral.org/t/specifying-information-about-endpoints-for-secure-exchange-of-client-data/373 "2023-03-28T15:53:04Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![bloom](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.openreferral.org/bloom/32/103_2.png) [@bloom](https://forum.openreferral.org/u/bloom)\
**Post date:** [March 28, 2023, 3:53pm UTC](https://forum.openreferral.org/t/specifying-information-about-endpoints-for-secure-exchange-of-client-data/373/1 "2023-03-28T15:53:04Z")

</div>

Does anyone have any experience with specifying information about organizations’ and/or services’ ‘endpoints’ – i.e. for secure exchange of data about clients – such as [DirectTrust](https://directtrust.org/what-we-do/direct-secure-messaging) or a FHIR API?

I don’t think this is at all common, but I know at least a couple of instances in which service providers are participating in some program through which they can receive data about clients or prospective clients (ie through screening and referral and other use cases associated with coordination of care) as shared by a third-party system directly to either their system of record or perhaps some intermediary platform through which they conduct some operations.

So in this case the organization (perhaps even a specific service) would be associated with a URL or perhaps a URI – but instead of for a web page, it’s an address of an encrypted data service.

If you know of anything like this in use among social service providers, I’m eager to learn how such endpoints were included in a resource directory record (i.e. are they associated with the Organization, or a specific Service, or a specific point of contact, etc).

For instance, there are at least a couple of social care providers listed in [the Direct Trust directory](https://directtrust.org/what-we-do/directory-services) which is used for direct messaging among certified healthcare providers. [Here’s their documentation](https://directtrust.app.box.com/s/ysjqyqtad9zir1n36se01gdgtz2m8koz) (page 16-27) about how endpoints are specified in the Direct directory.

I’ve offered to provide guidance to Direct’s standards body about how this might work, and to help folks in that process (potentially) develop a proposed ‘profile’ of HSDS that might specify how such endpoints can be structured in a social care directory.

If you have any experience with this sort of thiing, I want to learn about it. And **if you’re interested, I’m organizing meetings on April 12th and 19th at 2p Eastern at which we can learn about this stuff from DirectTrust experts.** Would be glad to see if one or two interested folks from this community might be able to join one or both of those meetings…

thanks!

---

<div class="post-metadata">

**Author:** ![bloom](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.openreferral.org/bloom/32/103_2.png) [@bloom](https://forum.openreferral.org/u/bloom)\
**Post date:** [April 7, 2023, 5:18pm UTC](https://forum.openreferral.org/t/specifying-information-about-endpoints-for-secure-exchange-of-client-data/373/2 "2023-04-07T17:18:49Z")

</div>

Whoops – I got the date wrong, this meeting will be on April 12th at 2p Eastern, and we’ll have a followup the next week on the same day/time (4/19 2p). I’ve updatd in the text, let me know if you’re interested.

---

<div class="post-metadata">

**Author:** ![infohills](https://avatars.discourse-cdn.com/v4/letter/i/96bed5/32.png) [@infohills](https://forum.openreferral.org/u/infohills)\
**Post date:** [March 19, 2024, 1:23pm UTC](https://forum.openreferral.org/t/specifying-information-about-endpoints-for-secure-exchange-of-client-data/373/4 "2024-03-19T13:23:25Z")

</div>

While including endpoints in a resource directory record depends on context, [HubSpot data enrichment](https://www.globaldatabase.com/top-10-b2b-data-providers-in-2024) can benefit from a standardized approach. Typically, endpoints associated with organizations or their services (including URL, URI, and potentially authentication details) could be enriched with social care data.

Creating a proposed ‘profile’ for HSDS (Human Services Data Specification) to specify how such endpoints can be structured in a social care directory is a valuable effort. This would involve understanding the unique needs of social service providers and aligning them with existing interoperability standards like DirectTrust and FHIR. By incorporating social care data into HubSpot through enriched endpoints, organizations can gain a more comprehensive view of their target audience.